Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa
File: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (raw, json)
Hash identifier: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=
Subject key identifier: BA:D9:26:6F:22:75:FB:D4:C8:E4:8C:B6:F4:94:27:CE:FC:1F:76:0C
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019D49BE0F78311248EDE98258C9FB5D405B
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa
Signing time: Wed 01 Apr 2026 15:51:25 +0000
ROA not before: Wed 01 Apr 2026 15:51:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216068
IP address blocks: 185.69.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:be:0f:78:31:12:48:ed:e9:82:58:c9:fb:5d:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Apr 1 15:51:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad9266f2275fbd4c8e48cb6f49427cefc1f760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:b4:d7:6e:c8:0b:8a:ee:1e:75:3b:1a:a1:
d7:73:7e:56:bb:c3:a4:59:fe:6e:5c:9a:38:f3:0b:
6e:0f:fc:a7:63:56:b1:13:a7:0e:8e:fd:e3:5e:fb:
ee:6b:4f:18:2b:48:e6:05:28:01:f8:f1:a3:54:a5:
80:3b:48:9e:b6:37:71:b3:1f:d2:ef:dc:fc:48:de:
23:29:34:54:ee:24:d8:ad:0e:a2:37:5f:ea:99:23:
7e:4f:e6:cc:ec:33:37:2b:4d:68:61:3c:a1:ac:05:
fc:4e:c9:cc:ad:cd:22:c1:c5:94:21:fe:d7:a1:04:
58:d1:79:5f:f6:2f:d6:b3:48:89:1f:b8:12:ff:b3:
20:34:69:5a:a1:23:d0:7c:d5:10:dc:0b:f0:49:ba:
21:2f:ff:e6:6b:08:76:54:aa:66:64:b2:fe:2a:17:
0d:27:e6:c6:a2:4f:24:a8:f8:cc:35:3b:3b:03:35:
b1:a8:7c:f3:c6:49:05:5e:09:78:67:56:be:df:28:
1e:07:dd:8b:10:4a:c4:6c:2d:37:64:31:a1:3b:9d:
b8:3d:5e:1f:97:d9:ec:da:34:7c:3e:8c:54:3f:b8:
15:65:3a:be:a5:b8:60:9a:3b:6b:f4:0c:d2:27:3f:
2d:d0:59:d4:ce:de:89:02:56:fb:16:72:a3:50:fe:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:26:6F:22:75:FB:D4:C8:E4:8C:B6:F4:94:27:CE:FC:1F:76:0C
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2e:5f:53:c8:fa:86:a6:50:57:1a:36:61:f3:07:bd:0d:c1:
26:1b:c8:7b:82:ee:da:64:01:be:09:5b:b1:b1:58:a7:e6:12:
dd:f4:70:7f:43:81:5d:52:6c:1c:68:7e:5d:ac:c4:1f:08:3b:
c1:68:e8:a2:3b:9a:87:2d:e8:73:77:75:6e:d4:d1:d0:74:a4:
37:10:88:5a:41:56:15:33:25:0e:44:55:dc:63:95:02:67:02:
89:27:fc:cb:c4:2f:c3:85:0e:21:49:86:69:e3:66:4e:da:ef:
61:d7:4d:79:1d:53:fe:3e:05:3c:3c:62:de:0d:ba:68:a7:b4:
8c:06:cd:6b:1c:cb:9c:60:a4:f3:66:21:55:f6:af:8e:f7:33:
05:93:9e:42:be:c2:b3:9e:d6:45:a8:9c:1b:b7:a4:a4:77:45:
f5:f9:7c:28:64:f0:98:3d:0a:90:13:0b:02:e6:36:98:01:7d:
34:fa:ea:51:79:89:92:71:39:ee:67:e1:3d:0b:7f:40:f3:a8:
3e:dc:3f:ed:a8:3a:f0:99:09:fd:77:d1:e8:35:84:a4:c6:be:
19:2e:db:f7:4d:43:88:75:a7:15:7f:de:e3:04:e5:b2:31:49:
de:48:f8:1d:d8:f7:df:11:75:17:f3:b7:9b:77:6a:df:61:02:
fc:cc:e7:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1Jvg94MRJI7emCWMn7XUBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2
N2VmMTMwHhcNMjYwNDAxMTU1MTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQ5MjY2ZjIyNzVmYmQ0YzhlNDhjYjZmNDk0MjdjZWZjMWY3NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2K0127IC4ruHnU7GqHXc35Wu8Ok
Wf5uXJo48wtuD/ynY1axE6cOjv3jXvvua08YK0jmBSgB+PGjVKWAO0ietjdxsx/S
79z8SN4jKTRU7iTYrQ6iN1/qmSN+T+bM7DM3K01oYTyhrAX8TsnMrc0iwcWUIf7X
oQRY0Xlf9i/Ws0iJH7gS/7MgNGlaoSPQfNUQ3AvwSbohL//mawh2VKpmZLL+KhcN
J+bGok8kqPjMNTs7AzWxqHzzxkkFXgl4Z1a+3ygeB92LEErEbC03ZDGhO524PV4f
l9ns2jR8PoxUP7gVZTq+pbhgmjtr9AzSJz8t0FnUzt6JAlb7FnKjUP7CuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrZJm8idfvUyOSMtvSUJ878H3YMMB8GA1UdIwQY
MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt
YjI1MDk5N2ZjNzVkLzEvdXRrbWJ5SjEtOVRJNUl5MjlKUW56dndmZGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk
LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXeMA0G
CSqGSIb3DQEBCwUAA4IBAQCzLl9TyPqGplBXGjZh8we9DcEmG8h7gu7aZAG+CVux
sVin5hLd9HB/Q4FdUmwcaH5drMQfCDvBaOiiO5qHLehzd3Vu1NHQdKQ3EIhaQVYV
MyUORFXcY5UCZwKJJ/zLxC/DhQ4hSYZp42ZO2u9h1015HVP+PgU8PGLeDbpop7SM
Bs1rHMucYKTzZiFV9q+O9zMFk55CvsKzntZFqJwbt6Skd0X1+XwoZPCYPQqQEwsC
5jaYAX00+upReYmScTnuZ+E9C39A86g+3D/tqDrwmQn9d9HoNYSkxr4ZLtv3TUOI
dacVf97jBOWyMUneSPgd2PffEXUX87ebd2rfYQL8zOfp
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:58:42 2026 by rpki-client